vbatts/sbsigntools
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
sbsigntools/tests/Makefile.am

66 lines
1.7 KiB
Text
Raw Normal View History

tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
AUTOMAKE_OPTIONS = parallel-tests
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
test_key = private-key.rsa
test_cert = public-cert.pem
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
test_arches = x86_64 i386
test_images = test-x86_64.pecoff test-i386.pecoff
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
check_PROGRAMS = test-x86_64.pecoff test-i386.pecoff
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
check_DATA = $(test_key) $(test_cert)
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
check_SCRIPTS = test-wrapper.sh
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
tests: fix up the generation of the test pecoff binary for gcc-7.2 newer versions of gcc have contained an efi target for a while so use it instead of hacking a linker script. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2017-10-19 00:20:56 +00:00
test_i386_pecoff_SOURCES = test.S
test_x86_64_pecoff_SOURCES = test.S
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
test-%.pecoff: test-%.elf
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
$(OBJCOPY) -j .text -j .sdata -j .data \
-j .dynamic -j .dynsym -j .rel \
-j .rela -j .reloc \
tests: fix up the generation of the test pecoff binary for gcc-7.2 newer versions of gcc have contained an efi target for a while so use it instead of hacking a linker script. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2017-10-19 00:20:56 +00:00
--target=$(test_lds) $^ $@
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
$(STRIP) $@
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
test-x86_64.pecoff: test_image_arch = x86-64
tests: fix up the generation of the test pecoff binary for gcc-7.2 newer versions of gcc have contained an efi target for a while so use it instead of hacking a linker script. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2017-10-19 00:20:56 +00:00
test-x86_64.pecoff: test_lds = efi-app-x86_64
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
test-x86_64.pecoff: ASFLAGS += -m64
test-x86_64.pecoff: LDFLAGS += -m64
test-i386.pecoff: test_image_arch = i386
tests: fix up the generation of the test pecoff binary for gcc-7.2 newer versions of gcc have contained an efi target for a while so use it instead of hacking a linker script. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2017-10-19 00:20:56 +00:00
test-i386.pecoff: test_lds = efi-app-ia32
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
test-i386.pecoff: ASFLAGS += -m32
test-i386.pecoff: LDFLAGS += -m32
tests: fix up the generation of the test pecoff binary for gcc-7.2 newer versions of gcc have contained an efi target for a while so use it instead of hacking a linker script. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2017-10-19 00:20:56 +00:00
test-%.elf: LDFLAGS += -nostdlib
test-%.elf: test-%.$(OBJEXT)
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
$(LINK) $<
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
test-%.$(OBJEXT): $(srcdir)/test.S
tests: Use COMPILE.S for assembing test object Currently, ASFLAGS is not used, as we call $(AS) directly. Use $(COMPILE.S) instead. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 08:23:00 +00:00
$(COMPILE.S) -o $@ $^
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
$(test_key): Makefile
openssl genrsa -out $@ 2048
$(test_cert): $(test_key) Makefile
openssl req -x509 -sha256 -subj '/' -new -key $< -out $@
TESTS = sign-verify.sh \
sign-verify-detached.sh \
sbattach: fix --detach sbattach --detach isn't working, as we're not properly setting sigbuf in image_pecoff parse. This change ensures we populate sigbuf when we find a valid cert table. Also, add a test case for this. Bug report & initial patch from from Steve Langasek. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-02 08:43:08 +00:00
sign-detach-verify.sh \
tests: Add tests for missing image, cert & key files Currently causes a segfault in verify-missing-image.sh. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 09:25:47 +00:00
sign-attach-verify.sh \
sign-missing-image.sh \
sign-missing-cert.sh \
sign-missing-key.sh \
verify-missing-image.sh \
tests: Add a test to check invalid PKCS7 signature attaching Add a test for the invalid PKCS7 signature attaching. This test generates 1K of zero bytes as an invalid signature to attach. Signed-off-by: Ivan Hu <ivan.hu@canonical.com> Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-19 03:19:48 +00:00
verify-missing-cert.sh \
tests: Add test for PE/COFF cert table header validity Add a test to check the validity of the certificate table header, ensuring that parsing the header gives us the valid certificate. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-28 04:38:34 +00:00
sign-invalidattach-verify.sh \
image: add functions to add and remove signatures Rather than setting ->sigbuf directly, add two functions to handle image signature addition and removal: image_add_signature(image, sig, sigsize); image_remove_signature(image); And warn when a signature is to be overwritten. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-03 02:03:14 +00:00
cert-table-header.sh \
resign-warning.sh \
image: Use size of image data when writing images When detaching a signature, we need to know the size of the non-signature data. So, add a data_size member to struct image, and populate it when we iterate through the section table. When writing the image, use data_size rather than size, so we don't unnecessarily add the (now unused) signature data. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:49:40 +00:00
reattach-warning.sh \
detach-remove.sh
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
TEST_EXTENSIONS = .sh
make check: fix test environment problem autotest is very finicky. The environment can't be set up in SH_LOG_COMPILER, but have to be done in AM_TESTS_ENVIRONMENT instead, so fix this. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
2017-10-18 23:48:01 +00:00
AM_TESTS_ENVIRONMENT = TEST_ARCHES='$(test_arches)'; export TEST_ARCHES;
SH_LOG_COMPILER = $(srcdir)/test-wrapper.sh
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
tests: Add a few simple tests Add a few tests for the sign, verify, attach and detach code. These require some additional infrastructure to create a sample PE/COFF executable, plus a key & cert for testing. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-13 06:23:26 +00:00
EXTRA_DIST = $(test_lds) test.S $(TESTS) $(check_SCRIPTS)
tests: run tests for each arch Since we can sign i386 PE/COFF images, run the tests on both x86-64 and i386 binaries. We do this by moving test.pecoff to test-<arch>.pecoff, and using automake's parallel-test option to add a wrapper to each test execution. This wrapper calls each test once per arch (as defined in TEST_ARCHES), and checks for failures in any invocation. Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-08-13 05:01:20 +00:00
CLEANFILES = $(test_key) $(test_cert) $(test_images)
Reference in a new issue Copy permalink